Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JPmFAerqBoiPes8wPlOzHZchN5Y.roa
File: JPmFAerqBoiPes8wPlOzHZchN5Y.roa (raw, json)
Hash identifier: v9UEQwzfq/YYS3ApFeo/16bEdRQIyFC9ntVEsCyI9f0=
Subject key identifier: 24:F9:85:01:EA:EA:06:88:8F:7A:CF:30:3E:53:B3:1D:97:21:37:96
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CB886E0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JPmFAerqBoiPes8wPlOzHZchN5Y.roa
Signing time: Sat 01 Jan 2022 05:05:00 +0000
ROA not before: Sat 01 Jan 2022 05:05:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51681
IP address blocks: 45.133.2.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213419744 (0xcb886e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:05:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24f98501eaea06888f7acf303e53b31d97213796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:59:eb:21:fa:2d:5f:ad:a3:db:a4:68:71:
7d:43:3a:de:a0:c7:db:11:c7:f7:64:57:e0:c6:d0:
0f:1e:0f:e7:94:3f:31:46:a1:46:10:f0:f0:4e:f3:
af:6f:13:4a:38:ae:9d:6b:3d:89:db:3d:d2:e3:28:
0f:6c:0b:f9:1e:50:67:c1:e4:db:31:4e:91:f5:70:
ce:88:fa:4b:65:a5:ec:b5:1c:be:4e:5d:5f:fd:6c:
d6:19:fe:80:09:4d:e6:55:59:fe:fd:1e:75:da:7d:
e9:1a:19:6e:63:00:ab:82:bc:19:6f:c3:fa:a6:bf:
83:b5:1f:39:87:3a:58:1a:36:fa:fc:88:34:86:2b:
a4:27:ba:2a:ca:ba:3c:cc:96:ad:94:0e:a4:e7:4b:
b3:ca:11:fc:10:ee:94:21:17:bd:82:6a:4d:f3:4f:
dd:75:59:ae:dd:ed:59:4b:f1:f8:e6:c6:5b:53:c8:
44:20:ac:56:92:b0:46:ca:6e:92:f6:2c:7c:d8:86:
30:95:1e:f2:e7:b5:1f:a0:a2:8b:12:c9:fe:31:41:
c3:94:4b:1f:19:07:09:dc:98:2c:ef:9c:43:3c:03:
f2:2d:88:7b:69:f3:6b:66:93:87:ff:35:79:10:3b:
5c:2c:b0:b5:fd:48:bd:27:3c:10:d4:02:5d:c9:ce:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:85:01:EA:EA:06:88:8F:7A:CF:30:3E:53:B3:1D:97:21:37:96
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JPmFAerqBoiPes8wPlOzHZchN5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.2.0/23
Signature Algorithm: sha256WithRSAEncryption
13:54:54:1e:e4:f1:c5:48:d9:77:93:b3:05:02:b2:d9:6b:21:
02:45:b4:40:b9:19:6c:9a:06:52:b3:a7:fa:af:78:5c:1a:ab:
4c:7c:e4:09:de:29:01:75:bb:a6:78:55:22:2e:76:83:f2:5c:
a4:30:e1:8d:be:68:01:fe:e5:8d:64:d9:11:16:e2:1c:51:14:
9d:62:2a:72:10:2e:e9:90:65:bd:71:35:8b:89:8e:ae:17:ed:
75:d9:64:a2:b4:77:74:bb:1e:0b:a7:8b:e5:c7:a6:5e:21:eb:
41:2a:d7:40:08:c1:24:a5:22:4f:06:b6:89:51:3a:91:6d:ea:
03:2b:02:0d:6a:8a:b4:b4:32:0d:57:1a:a5:35:fd:4a:02:9d:
db:1f:0b:a3:af:b1:23:5e:3e:37:13:2c:02:a3:cc:8f:93:01:
25:dd:cb:4c:fa:7a:b7:67:d6:b5:f2:89:53:8e:00:ed:5a:bd:
7d:7f:9f:7f:64:ea:40:4c:10:c1:31:d3:0c:0e:b1:a5:02:80:
6e:6e:61:b6:e5:c9:a5:65:98:32:23:79:7d:7a:c9:3a:b5:54:
af:81:a9:57:f4:90:19:52:15:0f:5c:3b:a5:bb:bd:29:ca:44:
47:6d:bf:91:08:35:76:a8:59:0e:c5:f9:ba:aa:84:c4:89:8d:
06:9f:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:45 2024 by rpki-client on console-fra.rpki-client.org